AMENDMENT TO THE CLAIMS 



1. (Currently Amended) A system comprising: 

a non-volatile data storage device, configured as one or more storage regions, to 
store one or more bytes of CMOS BIOS data , wherein the device lacks hardware 
security such that some of the CMOS BIOS regions are modifiable by an application 
pro gram on the system; 

another non-volatile data storage device to store a mirror image of the CMOS 
BIOS data; 

a program store communicativoly coupled to the non volatile data otorago 
device, the program store t o store one or more processor-readable instructions to 
ascertain the validity of the CMOS BIOS data stored in the non-volatile storage device 
and if invalid to replace the CMOS BIOS data in the non-volatile storage device w ith aft 
earlier storod valid t he mirror image of the data; and 

a processing unit coupled to the non-volatile data storage device and program 
store, to read and process the one or more instructions in the program store. 

2. (Previously Presented) The system of daim 1 wherein the processing unit is 
configured to process the instructions in the program store as part of a start-up 
procedure. 

3. (Currently Amended) The system of daim 1 wherein the data stored in the non - 
volatile data storage device io a Bacic Input Output System (BlOS) program store is 
inside said another non-volatile data storage device . 

4. (Original) The system of daim 1 wherein the processor-readable instructions in 
the program store ascertain the validity of the data stored in the non-volatile storage 
device on a region by region basis. 

5. (Currentiy Amended) The system of daim 1 wherein the earlier stored valid 
image of the CMOS BIOS data is stored in a location that cannot be modified without 
system authorization. 
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6. (Currentiy Amended) The system of claim 5 wherein system authorization 
includes 

employing a system interface to perform modifications to the data stored in 
said another n on-volatile data storage device. 

7. (Currently Amended) The system of daim 1 wherein ascertaining the validity of 
the CMOS BIOS data stored in the non-volatile storage device includes 

determining if the current data in the non-volatile storage device is different than 
the oarlior s tored valid i mage of the data. 

8. (Currently Amended) The system of daim 1 wherein ascertaining the validity of 
the CMOS BIOS d ata stored in the non-volatile storage device includes 

determining if an integrity metric corresponding to the current data in the non- 
volatile storage device is different than the same integrity metric corresponding to the 
oarlior s tored valid i mage of the data. 

9. (Original) The system of daim 1 further comprising: 

generating a copy the current data in the non-volatile storage device if an 
authorized application modifies the current data; and 

storing the copy as a valid image of the current data. 

10. (Currently Amended) A method comprising: 

reading current CMOS BIOS content storejd in a non-volatile storage devic e of a 

system, wherein the device lacks hardware security such that the CMOS BIOS content is 

modifiable by an application program in the systems- 
reading from a valid image of the CMOS BIOS content that is stored in a further 

non-volatile storage device; 

determining if the current content has been modified without authorization; and 
repladng the current content with a proviouoly s aid stored valid image of the 

content if the current content is determined to have been modified without 

authorization. 

11. (Currently Amended) The method of daim 10 further compricing w herein the 
determining comprises : 

reading the valid image of the proviouoly otorod CMOS BIOS content; and 
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comparing the proviouGly otorod conton t read valid image to the oirrent content 
to determine if the current content has been modified. 

12. (Currently Amended) The method of claim 10 wherein determining if the 
current content has been modified without authorization includes 

comparing a previously stored checksum, corresponding to the valid image of 
the previously otorod c ontent, and the checksum corresponding to the current content. 

13. (Currently Amended) The method of daim 10 wherein determining if the 
current content has been modified without authorization includes 

comparing a previously stored cyclic redtindancy check value, corresponding to 
the valid image of the previously stored content, and the cyclic redundancy check value 
corresponding to the current content. 

14. (Currentiy Amended) The method of claim 10 wherein determining if the 
current content has been modified without authorization includes 

comparing a previously stored bit mask, corresponding to the valid image of 
previously otorod the content, and d%e-abit mask corresponding to the current content. 

15. (Original) The method of claim 10 further comprising: 
storing a valid image of the current content for later use. 

16. (Original) The method of claim 10 wherein the content is read from the non- 
volatile storage device as part of a start-up procedure. 

17. (Ctirrentiy Amended) A method comprising: 

arranging a non-volatile storage device of a computer system into one or more 
storage regions to store CMOS BIOS data, wherein the device lacks hardware security 
such that some of the CMOS BIOS regions are modifiable bv an application program in 
the system; 

generating an integrity metric corresponding to valid CMOS BIOS c ontent stored 
in a first region of the non-volatile storage device; and 

storing the integrity metric in another non-volatile storage device of the 
computer system to later determine if the content in the first region has been modified 
without authorization. 
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18. (Original) The method of claim 17 further comprising: 

comparing a previously stored integrity metric, corresponding to an earlier 
version of the content stored in the first region, to a newly calculated integrity metric 
corresponding to the current content stored in the first region to determine if an 
unauthorized modification has occurred. 

19. (Original) The method of claim 17 further comprising: 

replacing the first region with an earlier version of the content therein if it is 
determined that there was an tmauthorized modification. 

20. (Currently Amended) A method comprising: 

arranging a non-volatile storage device of a computer system i nto one or more 
storage regions to store CMOS BIOS data, wherein the device lacks hardware security 
such that some of the CMOS BIOS regions are modifiable by an application program in 
the system; and 

comparing current content in a first region to an earlier stored image of the 
content in the first regio n, wherein the earlier stored image is in a further non-volatile 
storage device; and 

replacing the current content stored in the first region with the proviouply e arlier 
stored content of the firot rogion i mage if it is determined that there was an 
unauthorized modification of the current content. 

21. (Currently Amended) The method of claim 20 wherein the method is 
implemented as part of a start-up procedure in the computer system . 

22. (Previously Presented) The method of claim 20 wherein the non-volatile storage 
device is arranged into one or more logical regions, each region having one or more 
bytes. 

Qaims 23-25 (Canceled). 

26. (Ctirrentiy Amended) A machine-readable medium having one or more 
instructions for protecting CMOS BIOS c ontent in a non-volatile storage device of a 
system against unauthorized ^s emodification in the system^ which when executed by a 
processor, causes the processor to perform operations comprising: 
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reading current CMOS BIOS c ontent stored in a Ahe n on-volatile storage device; 
determining if the read c urrent content has been modified without authorization; 

and 

replacing the current content with a previously stored image of the content from 
a flash memory of the system, i f the current content is determined to have been 
modified without authorization. 

27. (Currentiy Amended) The machine-readable medium of claim 26 wherein 
determining if the current content has been modified without authorization includes 

reading an imago of the previously stored image of the CMOS BIOS conten t from 
another non-volatile storage device of the system; and 

comparing the previously stored content i mag e to the current content to 
determine if the current content has been modified. 

28. (Original) The machine-readable medium of claim 26 wherein determining if the 
current content has been modified without authorization includes 

comparing a previously stored checksum corresponding to a valid image of 
previously stored content and the checksum corresponding to the current content. 

29. (Original) The machine-readable medium of claim 26 wherein determining if the 
current content has been modified without authorization includes 

comparing a previously stored cyclic redundancy check value corresponding to a 
valid image of previously stored content and the cyclic redundancy check value 
corresponding to the current content. 

30. (Previously Presented) The machine-readable medium of claim 26 wherein 
determining if the current content has been modified without authorization includes 

comparing a previously stored bit mask corresponding to a valid image of 
previously stored content and the bit mask corresponding to the current content. 
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